denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
6,390 Commits 1 Branch 0 Tags
4e508517d71c98efcb5b6d27dbcaed629d69cfb4
Commit Graph
566 Commits
Author SHA1 Message Date
Martin Willi 4e508517d7 Added support for CRL Issuers to x509 and OpenSSL plugins 2011-01-05 16:45:55 +01:00
Andreas Steffen 27a66f9393 implemented wrap around of registered IKEv1 algorithm names 2010-12-26 17:11:02 +01:00
Martin Willi d86bb6ef4d Implemented Traffic Flow Confidentiality padding in kernel_interface 2010-12-20 09:45:39 +01:00
Andreas Steffen 5932f41fcc trace back crypto algorithms to the plugins that registered them 2010-12-18 16:31:12 +01:00
Tobias Brunner 5feda42724 pluto: Fixed a regression introduced in f565d0c575. 
Since scx_add could return a previously created smartcard object, using
sc->last_cert to store the newly added certificate could lead to segfaults.
 2010-10-26 09:58:13 +02:00
Tobias Brunner 71711b67b4 pluto: Locking fixed in cert_add. 2010-10-26 09:58:13 +02:00
Andreas Steffen 1f2c328355 payloads are not aligned to 4 byte boundaries 2010-10-25 19:31:07 +02:00
Andreas Steffen 4b7d1262d9 define state_story for STATE_UNDEFINED 2010-10-16 16:15:10 +02:00
Egbert Koening 4de8398f93 fix segfault when reading certificate from smartcard 2010-10-15 11:09:38 +02:00
Tobias Brunner 4d10e260de pluto: Install inbound policies together with outbound policies. 
This avoids an error message when uninstalling the policies and charon
did it already like this.
 2010-10-14 13:53:20 +02:00
Andreas Steffen 2b3124c76d fixed release of virtual IP for XAUTH identities 2010-09-26 10:17:01 +02:00
Tobias Brunner 0a1233e642 Moved man pages for config files to a separate directory. 2010-09-10 12:01:19 +02:00
Andreas Steffen f3051ebf53 fixed memory leak 2010-09-09 21:38:41 +02:00
Martin Willi d987946e80 Added a final flag to builder registration to enumerate the actually supported algorithms 2010-09-03 18:09:48 +02:00
Tobias Brunner 1dfd6d18ff pluto: Removed unused lifetime from raw_eroute. 2010-09-02 19:04:26 +02:00
Tobias Brunner b5be105aaf pluto: Added support for statically configured reqids. 2010-09-02 19:04:25 +02:00
Tobias Brunner f8edbc22c7 pluto: Make marks available in updown script. 2010-09-02 19:04:25 +02:00
Tobias Brunner 190ee00c94 pluto: Fixed comparison of connections, if marks are specified. 2010-09-02 19:04:25 +02:00
Tobias Brunner a280ba9525 pluto: Store xfrm marks on connection and use them when installing SAs and policies. 2010-09-02 19:04:25 +02:00
Tobias Brunner f23e7394ae pluto: Added PLUTO_UDP_ENC argument to updown script. 
This contains the remote UDP port in case of UDP encapsulated ESP.
 2010-09-02 19:04:25 +02:00
Tobias Brunner 3251294ceb pluto: Return value fixed. 2010-09-02 19:04:25 +02:00
Tobias Brunner d499bdf393 pluto: Removed bare shunt table. 2010-09-02 19:04:24 +02:00
Tobias Brunner 76467e030c pluto: Handle changed NAT mappings via libhydra's kernel interface. 2010-09-02 19:04:24 +02:00
Tobias Brunner a0cbce9e7c pluto: Removed no_klips flag (--noklips option). 2010-09-02 19:04:24 +02:00
Tobias Brunner eeca1b0466 pluto: Removed references to KLIPS from documentation, log messages and comments. 2010-09-02 19:04:24 +02:00
Tobias Brunner 6374671110 pluto: Added --debug-kernel as alias for --debug-klips. 2010-09-02 19:04:24 +02:00
Tobias Brunner ebdbf28a4a pluto: Replaced DBG_KLIPS with DBG_KERNEL. 2010-09-02 19:04:24 +02:00
Tobias Brunner 8dade8e6eb pluto: Removed the KLIPS preprocessor flag. 2010-09-02 19:04:24 +02:00
Tobias Brunner fc06e34e46 pluto: Removed unneeded kernel abstractions. 2010-09-02 19:04:23 +02:00
Tobias Brunner 36ff473016 pluto: Completely removed struct kernel_ops. 2010-09-02 19:04:23 +02:00
Tobias Brunner 296972aeaf pluto: Refactored PF_KEY capabilities registration. 
Although we use the kernel interface from libhydra we still need this to make
the available algorithms known to pluto.
 2010-09-02 19:04:23 +02:00
Tobias Brunner 4f898afc22 pluto: Removed unneeded functions from PF_KEY interface. 
We still use the algorithm registration.
 2010-09-02 19:04:23 +02:00
Tobias Brunner 03ee9623f3 pluto: Completely removed orphaned_holds. 2010-09-02 19:04:23 +02:00
Tobias Brunner 44b4f0d06f pluto: Install IN policy of a shunt eroute with protocol. 2010-09-02 19:04:23 +02:00
Tobias Brunner 9052216813 pluto: Fixed byte-order of ports in traffic selectors. 2010-09-02 19:04:23 +02:00
Tobias Brunner c6fd7549e8 pluto: Listen for kernel events via libhydra's kernel interface. 2010-09-02 19:04:22 +02:00
Tobias Brunner 40bbff5dbf pluto: Adapted kernel.c to changed kernel interface. 2010-09-02 19:04:22 +02:00
Tobias Brunner c3f4d68f0d pluto: Do not close all file descriptors on startup, just redirect stdin, stdout and stderr to /dev/null. 
Otherwise the pipe used to synchronize pluto->events with the main
thread would be closed.
 2010-09-02 19:04:21 +02:00
Tobias Brunner 8808edfb4c pluto: Added a generic event queue. 
This allows to easily execute arbitrary callbacks in the context of the pluto
main thread (e.g. in order to synchronize with threads from the thread-pool).
 2010-09-02 19:04:21 +02:00
Tobias Brunner 4cf459a054 pluto: Fixed the reqid that is passed to the updown script. 2010-09-02 19:04:21 +02:00
Tobias Brunner 199a415710 pluto: Migrated setup_half_ipsec_sa to libhydra's kernel interface. 2010-09-02 19:04:21 +02:00
Tobias Brunner 44643c2d01 pluto: Removed unneeded get_proto_reqid. 
We will use the same reqid for all protocols, as in charon.
 2010-09-02 19:04:21 +02:00
Tobias Brunner 717d60f13f pluto: Added missing return_on in out_sa. 2010-09-02 19:04:21 +02:00
Tobias Brunner 1d61bcaabd pluto: Use time_monotonic() instead of time() for use time calculation. 
That's because get_sa_info now returns a monotonic timestamp.
 2010-09-02 19:04:21 +02:00
Tobias Brunner 91f44a8bfc pluto: Removed KLIPS specific code from was_eroute_idle. 2010-09-02 19:04:21 +02:00
Tobias Brunner 013698d51e pluto: Migrated get_sa_info to libhydra's kernel interface. 2010-09-02 19:04:21 +02:00
Tobias Brunner 95898bcc56 pluto: Migrated teardown_half_ipsec_sa to libhydra's kernel interface. 2010-09-02 19:04:20 +02:00
Tobias Brunner 3ecf66c9e3 pluto: Adapted sag_eroute to the new signature of eroute_connection. 2010-09-02 19:04:20 +02:00
Tobias Brunner 952487d689 pluto: Migrated raw_eroute to libhydra's kernel interface. 
This introduces a new struct to pass the protocol information like spis.
Also adapted eroute_connection and the simple calls of raw_eroute to
the new signature.
 2010-09-02 19:04:20 +02:00
Tobias Brunner deea15f04e pluto: Added a function to create a traffic_selector_t from an ip_subnet. 2010-09-02 19:04:20 +02:00